Appl. No. 09/843,815 

Amdt. dated May 30, 2008 

Reply to Office Action of March 20, 2008 

Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in 
the application: 

Listing of Claims: 

1 . (Currently amended) A system for automatically configuring a plurality of 
different types of network devices, comprising 

a library of generic commands that can be applied to said devices and 
converters for converting each of said generic commands into device-specific 
commands to be applied to individual network devices; 

a database storing configuration parameters for said plurality of network 
devices; and 

a configuration interface which receives said parameters from said 
database and issues generic commands to said library to cause individual ones 
of said devices to be configured using said device-specific commands and in 
accordance with said parameters^ 

wherein said configuration interface displays identifications of firewall 
devices associated with a network and conduits withSn said firewall devices, and 
permits a user to select at least one of said firewall devices . 

2. (Original) The system of claim 1 wherein said interface issues 
commands to said library to obtain configuration information from individual 
devices, and stores said information in said database. 

3. (Original) The system of claim 1 wherein said configuration parameters 
are stored in said database as a model containing a list of values to which each 
configuration parameter in an individual one of said devices is to be set. 

4. (Original) The system of claim 3 wherein said model also identifies the 
specific sequence in which the setting of the parameter values is to take place. 
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5. (Currently amended) The system of claim 1 wherein said interface 
communicates with said database to obtain the identifications of the firewall 
devices a&se^ki4^^ generates a first display which lists said 
devices, and further includes means responsive to the selection of one of the 
devices in said list to generate a second display which lists the conduits-wrtfen 
■said-dev40e, wherein each conduit is identified by means of descriptive names 
stored in said database for local and external devices and/or networks that are 
logically connected by the conduit. 

6. (Original) The tool of claim 5, further including means responsive to the 
selection of one of the devices listed in said first display to generate a third 
display which lists internal networks owned by an entity associated with the 
selected device, and means to selectively open and close conduits respectively 
corresponding to said internal networks. 

7. (Original) The tool of claim 6 wherein said third display further includes 
means for adding a new conduit to one of the internal networks. 

8. (Original) The system of claim 1 wherein said interface includes: 
means for commanding a console server to send a message to each 

console connected to said console server; 

means for analyzing a response to said message provided by each 
console to determine the type of device which transmitted said response; and 

means for displaying a list of device types corresponding to the consoles 
connected to said console server. 
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9. (Original) The system of claim 1 further including a memory storing a 
template which contains a sequence of commands for configuring each of a 
plurality of devices of a given type, wherein each command that refers to a 
particular device contains a variable as the identification of the device; and 
wherein: 

said database stores a record which indicates the respective network 
address of each specific device for which a given device is to be configured, and 

said interface is responsive to a command to configure a given device for 
retrieving said template and the stored record associated with said given device, 
substituting the network addresses in the retrieved record for the variables in 
said template, .and issuing commands to configure the given device in 
accordance with said retrieved record and said template. 

10. (Original) The system of claim 9 wherein said network addresses 
comprise Internet Protocol (IP) addresses. 

11. (Original) The system of claim 9 wherein a plurality of templates are 
stored in said memory, each corresponding to a different respective type of 
device. 

12. (Original) The system of claim 11 wherein said templates are stored in 
said database. 

13. (Original) The system of claim 3 wherein each parameter setting in said 
model is used to construct a separate command, and said commands are stored 
in a queue to be individually retrieved and forwarded to said library by said 
interface. 

14. (Original) The system of claim 1 wherein said converters transmit each of 
said commands in accordance with a transmission protocol specific to the 
individual devices, respectively. 
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15. (Original) The system of claim 14 wherein one of said transmission 
protocols comprises Telnet. 

16. (Currently amended) A method for automatically configuring a plurality of 
different types of network devices, comprising the following steps: 

storing a library of generic commands for configuring said devices; 

linking a plurality of converters respectively associated with different ones 
of said network devices to said library, to convert said generic commands into 
device-specific commands to be applied to the associated devices; 

retrieving a set of parameters from a database that pertains to the 
configuration of one type of network device; a-Bd 

in response to receipt of said set of parameters, issuing generic 
commands to said library to cause a device of said one type to be configured in 
accordance with said parameters ; and 

displaying a plurality of firewall devices and a conduit for each such 
firewall device . 

17. (Previously presented) The method of claim 16, wherein said converters 
comprise respective plug-in modules that are registered with the library to 
receive generic commands directed to the devices with which they are 
associated. 

18. (Previously presented) The method of claim 16, wherein the step of 
issuing generic commands comprises the steps of: 

generating a corresponding generic command for each parameter in the 
retrieved set of commands; 

storing the generated commands in a queue; 

presenting a first command in the queue to said library, to be converted 
and transmitted to the device as a device-specific command; and 

in response to a reply to the transmitted command, presenting the next 
command in the queue to the library. 
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19. (Previously presented) The method of claim 18, wherein the reply to one 
of the transmitted commands contains information describing the configuration 
of the device, and further including the step of storing said information in the 
database. 

20. (Previously presented) The method of claim 16, wherein said set of 
parameters defines a model containing values to which configuration 
parameters of the device are to be set. 

21 . (Previously presented) The method of claim 20, wherein said model 
identifies a specific sequence in which the setting of the parameter values is to 
occur. 
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